Privacy Policy — Pious Alpha

1) Who we are (Data Controller)

2) What we collect

A) Website analytics (Plausible)

We use Plausible Analytics, which is designed to measure website usage without cross-site tracking.

Analytics events may include:

• Page URL visited
• HTTP referrer (the page you came from)
• Browser type and version (approximate)
• Operating system (approximate)
• Device type (desktop / mobile / tablet)
• Country (derived from IP address)

IP addresses: used only briefly to derive an approximate location and/or for security purposes, and are not stored by us in analytics.

Cookies: Plausible analytics on this Website is configured to be cookie-less.

For details about Plausible’s processing, see Plausible’s Privacy Policy.

B) Newsletter subscriptions

If you subscribe to our newsletter, we collect:

• Your email address
• Subscription date/time (and basic confirmation records if enabled)

We use this information only to send the newsletter and related updates you requested. You can unsubscribe at any time using the link in any email, or by contacting legal@piousalpha.com.

C) Server logs and security data (Hosting)

Our hosting provider (e.g., Vercel) automatically processes technical data to deliver the Website and keep it secure, such as IP addresses, timestamps, requested URLs, user-agent details, and error logs.

Retention: typically up to 30 days, unless a longer period is needed for security investigations, legal obligations, or dispute handling.

D) If you contact us

If you email us, we process:

• Your email address
• The content of your message
• Any information you choose to provide

We use this only to respond and handle your request.

3) Why we use data (Purposes)

We use collected information to:

• Understand how the Website is used and improve content and usability (analytics)
• Operate, secure, and maintain the Website (hosting logs, abuse prevention)
• Send newsletters to subscribers (newsletter)
• Respond to messages and requests (contact)

We do not sell your personal data or share it with third parties for their own marketing.

4) Legal bases under GDPR

Depending on the context, we rely on:

• Legitimate interests (Art. 6(1)(f)) — website security, fraud/abuse prevention, and performance monitoring to keep the Website running reliably.
• Consent (Art. 6(1)(a)) — newsletter subscription, analytics, and error monitoring services. You can withdraw consent at any time (unsubscribe for the newsletter, or change your cookie preferences via the footer link for analytics and monitoring).
• Legal obligation (Art. 6(1)(c)) — if we must retain certain information to comply with law (rare for a simple website).

5) Cookies and similar technologies

We aim to keep cookie usage minimal. When you first visit the Website, a consent banner lets you choose which categories of cookies and services to allow. You can change your preferences at any time by clicking "Cookie Preferences" in the footer.

No third-party advertising or tracking cookies are used on this Website.

A) Strictly Necessary (always active)

These are essential for the Website to function. They cannot be disabled.

B) Analytics (requires consent)

These services help us understand how visitors use the Website. They are privacy-friendly and do not set cookies themselves, but we include them here for full transparency and require your consent before they load.

C) Error Monitoring (requires consent)

These services help us detect and fix errors. They are only activated when you accept the "Error Monitoring" category in the consent banner.

D) Managing your cookie preferences

You can change or withdraw your consent at any time:

• Click "Cookie Preferences" in the Website footer
• Toggle individual categories or services on/off
• Click "Save preferences" to apply your choices

When you change your preferences, the page reloads to apply or remove the affected services immediately. Your consent preferences are stored locally in the cc_cookie cookie and also recorded server-side for audit purposes as required by GDPR Article 7(1).

6) Who we share data with (Recipients / Processors)

We only share data with service providers that help us run the Website, acting as processors where applicable, such as:

• Hosting/CDN provider (Vercel) — website delivery, logs, security
• Analytics provider (Plausible) — privacy-friendly, cookie-free analytics
• Error monitoring provider (Sentry) — error tracking and session replay (only when consented)
• Newsletter delivery provider (Resend) — email delivery and subscriber management

We do not share your data with third parties for their own marketing.

7) International transfers (outside the EEA)

Some service providers may process data outside the European Economic Area (EEA). When transfers occur, we rely on appropriate safeguards such as adequacy decisions, Standard Contractual Clauses (SCCs), or other lawful mechanisms under GDPR.

8) Data retention (How long we keep data)

We keep data only as long as necessary for its purpose:

• Analytics: retained according to our analytics configuration and provider settings, typically in aggregate form.
• Newsletter: kept until you unsubscribe or request deletion, plus minimal suppression records to respect your opt-out.
• Server/security logs: typically up to 30 days, unless longer retention is needed for investigations or legal compliance.
• Contact emails: retained as long as needed to handle your request and any follow-up, then deleted or archived securely.

9) Your rights (GDPR)

If you are in the EU/EEA, you generally have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion (in certain cases)
• Restrict or object to processing (in certain cases)
• Data portability (when applicable)
• Withdraw consent at any time (where processing is based on consent)

To exercise your rights, email legal@piousalpha.com. We may ask for verification to protect your data and prevent unauthorized access.

10) Complaints (Belgian supervisory authority)

If you believe your data is being processed unlawfully, you can lodge a complaint with the Belgian Data Protection Authority:

11) External links

This Website may link to external sites (e.g., GitHub, LinkedIn). We are not responsible for their privacy practices. Please review their privacy policies separately.

12) Children’s privacy

This Website is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided personal data, contact legal@piousalpha.com so we can delete it.

13) Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top indicates when it was last revised. Material changes will be posted on this page.

14) Contact

Questions or requests: legal@piousalpha.com